General

  • Target

    380d84145f371ef056e0c5d79b8a1e4329db36b181f480d100d4baa4d2254aa5

  • Size

    2.4MB

  • MD5

    e69c8638899d6ac790fb49db901d88b6

  • SHA1

    0712a913ea44af70616c92cbd7859b5a42139080

  • SHA256

    380d84145f371ef056e0c5d79b8a1e4329db36b181f480d100d4baa4d2254aa5

  • SHA512

    bba3ed757549768f4e70e0986305b8ea3fc230b974b1ab9092e30f1ea8689e98b1e5845f0ed3e2b7ff69156c36a1fe66ab5b8492711472688884fd32610b6019

  • SSDEEP

    49152:6RhndpXYCtc9Qbdz34n1ao0REXufjazO7jeyGH0YG5HW57Pv1dM:63dpXYCEQdz34nUo+EXufezkSygO25Rm

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 380d84145f371ef056e0c5d79b8a1e4329db36b181f480d100d4baa4d2254aa5
    .zip
  • 无广告免注册影视APP.url
    .url
  • 星星1009/Stars_A版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 星星1009/Stars_B版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 星星1009/Stars_C版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 更多辅助.txt
  • 硬汉视频(白嫖永久VIP).url
    .url
  • 网址发布页.url
    .url